Skip to content
English
  • There are no suggestions because the search field is empty.

Setting Up Two-Factor Authentication (2FA)

Secure your account with a TOTP authenticator app

Setting Up Two-Factor Authentication (2FA)

Two-factor authentication adds an extra layer of security by requiring a verification code from your authenticator app in addition to your password.

Where to Find It

Path: Left sidebar → Settings → Security → Two-Factor Authentication card

What You'll See

The Security page shows credential cards for each authentication method:

Two-Factor Authentication card:

  • Title: "Two-Factor Authentication"
  • Description: "Add an extra layer of security with a verification code from your authenticator app."
  • If not configured: "No authenticator app configured yet." with an "Add authenticator app" button
  • If configured: Shows the configured authenticator with creation date


Setting Up TOTP

  1. Navigate to SettingsSecurity in the left sidebar.
  2. Find the Two-Factor Authentication card.
  3. Click "Add authenticator app".
  4. A setup flow opens (powered by your authentication provider) — typically showing a QR code.
  5. Scan the QR code with your authenticator app (e.g., Google Authenticator, Authy, 1Password, Microsoft Authenticator, FreeOTP, ...).
  6. Enter the verification code from your app to confirm setup.

Screenshot 2026-05-13 at 10-01-35

Screenshot 2026-05-13 at 10.03.56

Success/Error Messages

  • ✅ "Two-factor authentication successfully configured"
  • ❌ "Failed to configure two-factor authentication"
  • "Two-factor authentication configuration cancelled" (if you cancel)

Important Notes

  • After enabling 2FA, you'll need to enter a verification code every time you log in.
  • Store your recovery codes securely in case you lose access to your authenticator app.
  • You can remove a configured authenticator from the Security page.

Removing a Credential

On any configured credential:

  1. Click the remove/delete action.
  2. Confirm removal.

Messages:

  • ✅ "Credential successfully removed"
  • ❌ "Failed to remove credential"